Create Local Admin Accounts on 500 Workstations

[Bigtm]

Hello, Probably an easy question to answer but I was wondering what the most efficient and time saving method of creating 2 extra local admin accounts on every PC(500) on the domain. At present we have a default Domain account which has full admin rights on each workstation but I need a method of adding another two Domain accounts as Full local Admins.

Any suggestions? I do hope there is a fast way round this.

Kind Regards,
BigTM.

 

[dglienna]

ADSI

http://www.microsoft.com/technet/scriptcenter/tools/admatic.mspx

Great tool!

-David
2006 & 2007 Microsoft Most Valuable Professional (MVP)
2006 Dell Certified System Professional (CSP)

 

[markdmac]

You can apply this through GPO using Restricted Groups.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[porkchopexpress]

As Mark said take a look at restricted groups.

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

 

[TheLad]

Following the advise above, why don't you add a Domain Group to the local Administrators group on each workstation rather than relying on a specific account or two? You can make domain users a member of this group (call it something like "Workstation Admins" if you want) if they require local admin access on the workstations. This is a useful way of granting this access for a PC Support team.

--------------------------------------
"Insert funny comment in here!"
--------------------------------------